Permanent, full time | Hybrid, with client sites as required | Business hours plus an on-call roster

ABOUT THE ROLE

Be the onshore technical lead and Level 2 escalation point for a managed SOC. You will own complex investigations and incident response, build detections and SOAR automation, and raise the bar for the team.

WHAT YOU'LL DO

- Own complex and high-severity incidents as the L2 escalation point
- Lead incident response from containment to lessons learned
- Run hypothesis-driven threat hunts using KQL, CQL and MITRE ATT&CK;
- Build and tune detections across Sentinel, Defender XDR and CrowdStrike
- Design SOAR automation with Logic Apps and Falcon Fusion
- Set SOC standards and runbooks, and coach analysts

WHAT YOU BRING

- 5+ years in cyber, 3+ years in a SOC and 2+ years at Level 2 or above
- Deep Microsoft Sentinel and Defender XDR experience
- Deep CrowdStrike Falcon experience: Insight, RTR, Next-Gen SIEM and Fusion




- Advanced KQL and CQL
- Experience leading real-world IR: ransomware, BEC and credential compromise
- MSSP or multi-client SOC experience (preferred)
- SC-200 plus a current CrowdStrike Falcon certification

NICE TO HAVE

- GIAC, BTL1/2, CySA+, OSCP or CISSP
- Forensics and malware analysis
- Splunk, Elastic, QRadar or Cortex XSOAR
- PowerShell or Python

ELIGIBILITY

- Australian citizens, Permanent Residents and holders of any Australian visa with full working rights are welcome to apply.

#SOCAnalyst #CyberSecurity #MicrosoftSentinel #CrowdStrike #MelbourneJobs #Hiring #MeritasTalent

Additional information

- Senior SOC Analyst (Level 2)
- Melbourne
- Australian citizens, Permanent Residents and Australian visa holders

#J-18808-Ljbffr

📌 Senior SOC Analyst (Level 2) (Melbourne)
🏢 SSM Technologies
📍 Melbourne